Agent skill · security · sundial-org
security-monitor
Real-time security monitoring for Clawdbot. Detects intrusions, unusual API calls, credential usage patterns, and alerts on breaches.
Why this skill is useful
Adds executable scripts for real-time security monitoring and intrusion detection that are not commonly found in public documentation.
What it needs
About 1k tokens when loaded. Last updated 2026-03-07. 639 stars on the source repository.
What this skill does
Security Monitor Skill When to use Run continuous security monitoring to detect breaches, intrusions, and unusual activity on your Clawdbot deployment. Setup No external dependencies required. Runs as a background process. How to Start real-time monitoring Run in daemon mode (background) Monitor for specific threats What It Monitors Threat Detection Response -------- ----------- ---------- Brute force attacks Failed login detection Alert + IP tracking Port scanning Rapid connection attempts Alert Process anomalies Unexpected processes Alert File changes Unauthorized modifications Alert Container health Docker issues Alert Output Console output (stdout) JSON logs at /root/clawd/clawdbot-security/logs/alerts.log Telegram alerts (configurable) Daemon Mode Use systemd or PM2 to keep monitoring active: Combined with Security Audit Run audit first, then monitor continuously: Related skills security-audit - One-time security scan (install separately)
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills sundial-org/security-monitor